
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb400b11-c615-3a77-b551-e8171432c2a4.roa
File: cb400b11-c615-3a77-b551-e8171432c2a4.roa (raw, json)
Hash identifier: bq2FyiZyiv+RAGhPBVtwi2dzieqEUxBzZEzgcqaxNPY=
Subject key identifier: 89:C0:06:28:2F:3F:29:6C:C9:EC:3F:5E:8B:49:9B:9F:AF:29:D3:2A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F11A077AE7F03DE8E65C68E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb400b11-c615-3a77-b551-e8171432c2a4.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 73.189.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a0:77:ae:7f:03:de:8e:65:c6:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=c4089dc8-b40c-4d25-a891-b6c1a8b7f930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:33:e4:dc:fb:14:8f:28:52:f0:85:56:9f:
4a:ab:8c:2f:65:59:83:d7:38:aa:8e:6e:d0:10:50:
87:6a:62:05:1a:84:b2:d7:83:37:15:54:f3:2b:85:
7b:39:b4:05:43:0f:b8:c9:a1:06:b8:4c:ba:20:24:
db:1a:5b:58:b0:7a:cc:d5:a3:6f:d8:72:45:22:5b:
ac:be:0c:ee:e4:1c:26:98:73:55:60:0f:b8:a9:e6:
51:78:9f:de:5b:a3:c3:c9:03:7d:94:09:d5:2f:be:
96:3e:60:d8:a5:69:43:e2:90:e8:67:d7:06:f3:21:
84:ae:49:a4:89:62:2e:5b:1c:e8:93:d5:18:53:17:
25:34:0b:9d:ad:95:09:90:87:14:de:76:f7:d4:c8:
d5:4d:89:a8:44:d4:d1:43:6d:12:9a:55:25:af:78:
f6:b8:23:06:72:11:23:47:c9:9f:a8:a1:90:e4:34:
b3:a4:77:43:23:e4:00:8b:04:73:8f:13:d8:60:b1:
c1:6b:f5:ce:27:2d:9f:f6:c5:9f:97:09:4c:29:62:
21:80:7e:3b:6d:bc:55:d9:71:58:eb:c8:30:5d:97:
03:4b:94:4e:10:12:86:aa:a4:71:b6:5e:ef:f1:fb:
fb:ae:43:da:a0:5a:3a:20:2d:df:fb:16:3e:ea:6b:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C0:06:28:2F:3F:29:6C:C9:EC:3F:5E:8B:49:9B:9F:AF:29:D3:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb400b11-c615-3a77-b551-e8171432c2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.189.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:f3:6a:5c:43:72:7e:ff:9c:2f:37:fb:8b:db:f3:5c:78:01:
97:4e:bd:ef:ff:96:d4:db:e6:89:9f:48:5e:15:5b:a7:41:4c:
cf:d8:83:56:69:a2:1f:2a:d5:3f:d0:72:a9:4c:df:c5:ad:06:
36:6c:ee:83:e0:86:72:d4:1e:b6:42:32:7e:16:71:c6:03:28:
05:cc:33:84:26:f2:50:1e:f4:20:06:e5:04:96:7e:0f:c4:2d:
8b:a7:d6:5f:c8:3d:23:33:91:94:ad:8a:9b:7d:51:c2:40:c0:
24:e8:9b:33:ba:a2:83:28:e1:73:44:e2:7d:dc:fc:3b:e5:3e:
f8:db:7d:13:df:a3:5b:5f:72:f3:6a:2e:14:6c:ec:85:de:01:
50:5a:0d:2e:87:47:88:2b:6b:10:0b:b7:ad:d5:f5:ad:cc:c5:
17:36:ec:33:b5:d0:57:f0:33:3c:f1:ae:4a:8a:b3:a5:58:35:
56:2f:e3:3d:55:36:aa:39:cc:58:89:a5:91:26:bc:18:05:51:
6a:e4:e0:89:0d:7f:60:c1:08:80:5f:7b:23:b3:91:e8:e1:e7:
1e:e9:7b:ae:14:e4:84:6d:c2:78:21:b3:f2:13:db:75:7d:71:
1d:33:d8:43:b9:75:9a:42:e6:40:60:52:c3:95:49:e5:fa:7d:
34:53:a2:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoHeufwPejmXGjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzQwODlkYzgtYjQwYy00ZDI1LWE4OTEtYjZjMWE4YjdmOTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuoz5Nz7FI8oUvCFVp9Kq4wvZVmD1ziqjm7Q
EFCHamIFGoSy14M3FVTzK4V7ObQFQw+4yaEGuEy6ICTbGltYsHrM1aNv2HJFIlus
vgzu5BwmmHNVYA+4qeZReJ/eW6PDyQN9lAnVL76WPmDYpWlD4pDoZ9cG8yGErkmk
iWIuWxzok9UYUxclNAudrZUJkIcU3nb31MjVTYmoRNTRQ20SmlUlr3j2uCMGchEj
R8mfqKGQ5DSzpHdDI+QAiwRzjxPYYLHBa/XOJy2f9sWflwlMKWIhgH47bbxV2XFY
68gwXZcDS5ROEBKGqqRxtl7v8fv7rkPaoFo6IC3f+xY+6mvKPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInABigvPylsyew/XotJm5+vKdMqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I0MDBiMTEtYzYxNS0z
YTc3LWI1NTEtZTgxNzE0MzJjMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb0qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjzalxDcn7/nC83+4vb81x4AZdOve//ltTb5omfSF4VW6dBTM/Yg1Zp
oh8q1T/QcqlM38WtBjZs7oPghnLUHrZCMn4WccYDKAXMM4Qm8lAe9CAG5QSWfg/E
LYun1l/IPSMzkZStipt9UcJAwCTomzO6ooMo4XNE4n3c/DvlPvjbfRPfo1tfcvNq
LhRs7IXeAVBaDS6HR4graxALt63V9a3MxRc27DO10FfwMzzxrkqKs6VYNVYv4z1V
Nqo5zFiJpZEmvBgFUWrk4IkNf2DBCIBfeyOzkejh5x7pe64U5IRtwnghs/IT23V9
cR0z2EO5dZpC5kBgUsOVSeX6fTRTohs=
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:02:54 2026 by rpki-client